From f5ef38d3ee8754ece650efb1191fe32e8494d191 Mon Sep 17 00:00:00 2001 From: Cary Phillips Date: Thu, 11 Jun 2020 17:12:07 -0700 Subject: [PATCH] added merged PR's to v2.4.2 release notes. Signed-off-by: Cary Phillips --- CHANGES.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/CHANGES.md b/CHANGES.md index 03ea106d45..cd5577c7c1 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -458,6 +458,12 @@ This is a patch release that includes fixes for the following security vulnerabi * Invalid chunkCount attributes could cause heap buffer overflow in getChunkOffsetTableSize() * Invalid tiled input file can cause invalid memory access TiledInputFile::TiledInputFile() +### Merged Pull Requests + +* [738](https://github.com/AcademySoftwareFoundation/openexr/pull/738) always ignore chunkCount attribute unless it cannot be computed +* [730](https://github.com/AcademySoftwareFoundation/openexr/pull/730) fix #728 - missing 'throw' in deepscanline error handling +* [727](https://github.com/AcademySoftwareFoundation/openexr/pull/727) check null pointer in broken tiled file handling + ## Version 2.4.1 (February 11, 2020) Patch release with minor bug fixes.